en
Feedback

Don't get caught by a cheater! Telemetrio finds and tags such channels 👉 If you want to see the tag, subscribe

Android Security & Malware

Android Security & Malware

Open in Telegram

📈 Analytical overview of Telegram channel Android Security & Malware

Channel Android Security & Malware (@androidmalware) in the English language segment is an active participant. Currently, the community unites 44 537 subscribers, ranking 2 999 in the Technologies & Applications category and 929 in the USA region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 44 537 subscribers.

According to the latest data from 05 November, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by -222 over the last 30 days and by -7 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 12.55%. Within the first 24 hours after publication, content typically collects 3.67% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 5 591 views. Within the first day, a publication typically gains 1 635 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 40.
  • Thematic interests: Content is focused on key topics such as cve-2025, exploit, rat, trojan, bypass.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com”

Thanks to the high frequency of updates (latest data received on 06 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

44 537
Subscribers
-724 hours
-497 days
-22230 days
Posts Archive
‘InTheBox’ Web Injects Targeting Android Banking Applications Worldwide https://blog.cyble.com/2023/01/31/inthebox-web-injects-targeting-android-banking-applications-worldwide/

Fraudulent “CryptoRom” trading apps sneak into Apple and Google app stores https://news.sophos.com/en-us/2023/02/01/fraudulent-cryptorom-trading-apps-sneak-into-apple-and-google-app-stores/

kavanoz - a tool that statically unpacks common Android banker malware https://github.com/eybisi/kavanoz

Pwning the all Google phone with a non-Google bug (CVE-2022-38181) https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/

CVE-2022-42864: Diabolical Cookies Proof-of-concept exploit for CVE-2022-42864, a time-of-check-time-of-use vulnerability in IOHIDFamily that was fixed in iOS 16.2 / macOS Ventura 13.1. https://github.com/Muirey03/CVE-2022-42864

Three Android Coper Banking Trojans Discovered On Google Play https://twitter.com/Threatlabz/status/1617579712062324737

Technical Advisory – Multiple Vulnerabilities in the Galaxy App Store (CVE-2023-21433, CVE-2023-21434) CVE-2023-21433 is an improper access control that allows attackers to install any applications available on the Galaxy App Store. CVE-2023-21434 is an improper input validation that lets attackers execute JavaScript on the target device. https://research.nccgroup.com/2023/01/20/technical-advisory-multiple-vulnerabilities-in-the-galaxy-app-store-cve-2023-21433-cve-2023-21434/

VASTFLUX - sophisticated ad fraud operation takendown. More than 1,700 apps and 120 publishers were spoofed, and the scheme ran inside apps on nearly 11 million devices. https://www.humansecurity.com/learn/blog/traffic-signals-the-vastflux-takedown

Android Exploit to get a System based shell (UID 1000) on ANY Samsung Mobile Device based on CVE-2019-16253 1) Downgrade to vulnerable SamsungTTS app 2) Install exploit APK 3) Exploit vulnerability to achieve System rights https://forum.xda-developers.com/t/system-shell-exploit-all-samsung-mobile-devices-no-bl-unlock-required.4543071/

Roaming Mantis implements new DNS changer in its malicious mobile app in 2022 Android malicious app gets IP of router gateway, identifies the router manufacturer, tries default credentials and changes DNS settings. Malware uses this technique to every free/public Wi-Fi networks such as cafes, bars, hotels, airports etc. so anyone connecting in these places might become a victim. https://securelist.com/roaming-mantis-dns-changer-in-malicious-mobile-app/108464/

Android Botnet Hook: a new Ermac fork with RAT capabilities https://www.threatfabric.com/blogs/hook-a-new-ermac-fork-with-rat-capabilities.html

Damn Vulnerable iOS App v2. Learn about 15+ different security issues by hacking the app to learn https://github.com/prateek147/DVIA-v2

Analysis of a Secure Messenger Threema revealed six possible attack scenarios https://breakingthe3ma.app/ Threema statement: https://threema.ch/en/blog/posts/news-alleged-weaknesses-statement

Android TV box from Amazon has pre-installed malware (T95 Android TV box Malware Analysis) https://github.com/DesktopECHO/T95-H616-Malware

Apple DER Entitlements: The (Brief) Return of the Psychic Paper (CVE-2022-42855) https://googleprojectzero.blogspot.com/2023/01/der-entitlements-brief-return-of.html

Explanation of various web injection techniques used by Android banking malware such as JavaScript injection, Overlay Attack and Cookie Stealing Attack https://securityintelligence.com/posts/view-into-webview-attacks-android/